It might be worth sharing the project with some privacy-oriented forums to get some feedback and ideas on what a good privacy model would look like for it. Good luck! :)